UNIVERSITY OF NEW ENGLAND 


University of NAME: 
New England , 
STUDENT NUMBER: 
UNIT CODE: AFM340 
PAPER TITLE: Fraud Prevention and Investigation 


PAPER NUMBER: _ First and Only 

DATE: Friday 5 June 2015 TIME: 1:45PM TO 4:00 PM 
TIME ALLOWED: — Two (2) hours and fifteen minutes 

NUMBER OF PAGES IN PAPER: ELEVEN (11) 

NUMBER OF QUESTIONS ON PAPER: FORTY FIVE (45) 


NUMBER OF QUESTIONS TO BE ANSWERED: FORTY THREE (43) 


STATIONERY 6 PAGE ANSWER BOOKS 0 GENERAL PURPOSE ANSWER SHEET 
PER 


CANDIDATE: 0 GRAPH PAPER SHEETS 0 GEOLOGY SAMPLES 


OTHER AIDS REQUIRED: ANSWER SHEET FOR PART A IS ON PAGE 11 
POCKET CALCULATORS PERMITTED: YES (APPROVED MODELS ONLY) 
TEXTBOOKS OR NOTES PERMITTED: NIL 


INSTRUCTIONS FOR CANDIDATES: 
e Candidates MAY NOT start writing until instructed to do so by the supervisor 


e Please pay attention to the announcements and read all instructions carefully before 
commencing the paper 


e Candidates MUST write their name and student number on the top of this page and on page 11 
e There are TWO (2) Parts to this examination paper 


e PART A: Candidates MUST answer ALL FORTY (40) questions on the Answer Sheet 
provided on page 11. Questions are worth 1 mark each 


e PART B: Candidates MUST answer any THREE (3) of the FIVE (5) questions in the 
Answer Book provided. Questions are worth 20 marks each 


e This examination question paper MUST BE HANDED IN with worked scripts. Failure to do 
so may result in the cancellation of all marks for this examination 


REMEMBER TO WRITE YOUR NAME AND STUDENT NUMBER AT THE TOP OF THIS PAGE AND 
ON THE ANSWER SHEET ON PAGE 11 


THE UNIVERSITY CONSIDERS IMPROPER CONDUCT IN EXAMINATIONS TO BE A SERIOUS OFFENCE. 
PENALTIES FOR CHEATING ARE EXCLUSION FROM THE UNIVERSITY FOR ONE YEAR AND/OR CANCELLATION 
OF ANY CREDIT RECEIVED IN THE EXAMINATION FOR THAT UNIT. 


AFM340, Trimester 1 2015 


PART A - Multiple Choice Questions 
(Each question is worth 1 mark, for a total of 40 marks) 


Candidates MUST answer all FORTY (40) questions on the Answer Sheet provided on Page 11. 


Who in an organisation is NOT in a good position to recognise fraud during the theft act? 


a. Other employees 
b. | Managers 

c. Auditors 

d. Coworkers 


In which stage do auditors have a good chance of detecting fraud, if the audit samples include 
altered documents and miscounts? 


a. Theft act 

b. Concealment 
Cc. Conversion 
d. __ Layering 


Fraud examiners must be able to recognise signals that a journal entry may have been 
manufactured to conceal a fraud. Which of the following is a common journal entry fraud 
symptom? 


Journal entries with documentary support 

Journal entries that balance 

Adjustments to receivables or payables that are clearly explained 
Journal entries made near the end of an accounting period 


ao Te 


Which of the following is an example of accounting anomaly fraud symptom? 


Missing documents 

Excess purchases 

Too many debit or credit memos 
Inadequate accounting system 


aoe 


Transactions happening at odd times or places; being performed by people who would not 
normally participate; or including odd procedures are typically associated with which type of 
fraud symptom? 


Accounting anomaly 
Internal control weakness 
Analytical anomaly 
Unusual behaviour 


BoP 


Document symptoms to some extent can signal that embezzlement is taking place. Which 
among the following usually do NOT point to some problem with the source documents? 


Photocopied documents 

Different names or addresses of payees or customers 
Excessive voids or credits 

Increased past-due accounts 


aoe, 


10. 


ee 
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13. 
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Digital analysis is: 


a. 


C: 
d. 


the art of analysing the digits that make up numbers like invoice amounts, reported hours, 
and costs 

a technique which calculates the average probability for each grouping of data 

the searching for expected relationships between numbers 

the use of numeric values for decision making 


A mathematical algorithm that predicts the percentage of the time each digit will appear in a 
sequence of numbers is: 


aoe, 


inductive fraud detection 
deductive fraud detection 
Benford's law 

horizontal analysis 


Benford's law can help detect fraud by: 


ao op 


establishing weaknesses in the accounting control system 
identifying accounting anomalies 

focusing on unexplained changes 

showing attempts by fraudsters to make stolen amounts look random 


What is the primary advantage of the data-driven approach? 


aoe 


The investigator makes hypotheses and tests to see if each one holds true 
It is less expensive and time intensive than the traditional approach 

The investigator takes charge of the fraud investigation process 
Data-driven fraud detection is proactive in nature 


Which statistical approach is one of the most powerful and yet simple methods for identifying 


outliers? 

a. N-grams 

b. —_Z-score 

c.  Time-trend analysis 
d. Soundex algorithm 


Identify the best pattern/order to go about a theft investigation. 


a. 


b. 


Search public records, check personal records, interview suspect, interview former 
employers, and interview other buyers. 

Check personal records, interview former employers, search public records, interview 
other buyers, and interview suspect. 

Interview suspect, interview former employers, search public records, check personal 
records, and interview other buyers. 

Interview other buyers, check personal records, interview former employers, interview 
suspect, and search public records. 


Surveillance is usually used to investigate: 


aoe 


Theft acts 

Concealment possibilities 
Conversion possibilities 
Key internal controls 


14. 


15. 


16. 


La 


18. 


19. 


20. 
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Undercover operations should be used only when: 


large scale fraud is likely and other investigation methods fail. 

controls are made so strict that opportunities to commit fraud are virtually impossible. 
the investigation cannot be kept a secret. 

there is a need to develop theories about what kind of fraud has occurred. 


aos Pp 


Several factors are considered in deciding whether or not to investigate fraud. Which of the 
following is NOT one of them? 


The signal that investigation or non-investigation will send to others in the organisation. 
Perceived cost of the investigation. 

Exposure or amount that could have been taken. 

Preparation of a surveillance log. 


aoe 


What is used in court cases to prove that data has not been adversely affected during analysis? 


Arithmetic mean 
Deviation measure 
Random sampling 
Checksums 


ao Te 


Which investigation technique usually does not work well in kickback situations? 


a. Concealment 
b. Theft 

c. Inquiry 

d. Conversion 


Computer searches and physical asset counts usually focus on which element of the fraud 
triangle. 


a. Theft 

b. Concealment 
Cc. Conversion 
d. =‘ Inquiry 


Mark owns a 24-hour convenience store. Lately he has noticed that the liquor inventory 
purchases have gone up by huge amounts, although sales proceeds from this category haven't 
increased. He has doubts about his two night-shift employees. Which is the best investigative 
method to uncover such a fraud? 


Covert operation 
Conversion investigation 
Inquiry investigation 
Concealment investigation 


ao FS 


Income from known sources subtracted from the total income gives a reasonable estimate of: 


a. Unknown funds 
b. Liabilities 
c. Living expenses 
d. Net worth 


pale 


22. 


23% 


24. 


pay 


26. 
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What do you understand by the term trashing? 


aoe 


A broad search on the Internet to obtain valuable information. 

Looking through a suspect’s garbage for possible evidence. 

Destroying hard copies important documents, so as to leave no evidence. 
Gaining financial information through previous acquaintances. 


Identify an example of a perceived pressure that can motivate financial statement fraud. 


ao Te 


The ability to obfuscate the fraud behind complex transactions 
Failure to meet analysts’ earnings expectations 

Rationalising that all companies use aggressive accounting practices 
A weak board of directors 


Which of the following is an example of a perceived opportunity that can lead to financial 
statement fraud? 


aoe 


Inability to compete with other companies 
Independent audit and a strong board of directors 
Thinking that fraud is good for the company 
Inadequate internal controls 


Frauds are more likely to occur in: 


a. 


d. 


large, historically profitable companies. 

companies with an active board of directors. 

smaller companies where one or two individuals have almost all control in decision 
making. 

any company, as the probability of a fraud does not change with the size of a company. 


Which of the following is NOT one of the components of the fraud exposure rectangle? 


ao op 


Accounting system controls 

Management and directors 

Financial results and operating characteristics 
The organisation and its industry 


One of the first tasks undertaken to understand the various revenue transactions in the company 
to uncover the revenue frauds is to: 


a. 


d. 


determine how each transaction could be misstated. 

evaluate the efficiency of the management. 

analyse and prepare diagrams of the various transactions between an organisation and its 
customers. 

identify scheme-specific symptoms and proactively search for more fraud. 


In related-party transactions, fraud occurs when: 


a. 


the transactions are not properly disclosed. 

assets are transferred between related parties at fair value. 

arrangements are made between two parties that create a conflict of interest in a business 
setting. 

the arrangement creates operating revenues. 


28. 


29: 


30. 


SL: 


32. 


DO: 


34. 
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Bid-rigging is a type of 


a. skimming 

b. bribery 

c. extortion 

d. illegal gratuity 


occurs when an employee demands a payment from a vendor in order to 
make a decision in that vendor’s favour. 


a. Bribery 

b. — Larceny 

c. | Economic extortion 
d. _— Illegal gratuity 


In asset misappropriation, the fraudsters most often target 


a. inventory 

b. cash 

c. equipment 

d. _—_ valuable information 


Claiming personal travel as a business expense, a personal lunch as a business lunch, altering a 
receipt to reflect a higher amount than was actually paid, or submitting fictitious receipts is an 
example of 


a billing scheme 

a payroll disbursement scheme 

a register disbursement scheme 

an expense reimbursement scheme 


Bose, 


Which of the following is the best example of theft of cash through skimming? 


a Preparing fraudulent cheques. 

b. — Understating sales by recording larger-than actual sales discounts. 
e Setting up dummy companies. 

d Stealing cash after it has already been recorded. 


The most common occupational frauds in small businesses involve employees doing all of the 
following EXCEPT: 


a skimming revenues. 

b. fraudulently writing company cheques. 
C processing fraudulent invoices. 

d altering financial statements. 


Kickback schemes almost always attack the _ function of the victim company. 
a. sales 

b. accounting 

c. human resources 

d. —_— purchasing 


35% 


36. 


Lye 


38. 


ao. 


40. 
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Cheque tampering is unique among the disbursement frauds because: 


a. 


b. 


d. 


the fraud perpetrator processes the transaction as if a customer were returning 
merchandise, even though there is no actual return. 

it is the one group of schemes in which the perpetrator physically prepares the fraudulent 
cheque. 

it is the one group of schemes in which the culprit generates a payment to himself or 
herself by submitting some false document to the victim company, such as an invoice or a 
timecard. 

the perpetrator does not have to undergo the risk of taking company cash or merchandise. 


Shoulder surfing occurs when criminals: 


aos, 


physically confront consumers forcing them to reveal their valuable information. 

follow consumers to discover their buying habits. 

sneak into victims’ homes and steal their information. 

watch consumers from a nearby location as they give credit card information over the 
phone. 


Fraudsters use “cookie” type software to: 


aoe, 


automatically remove web histories after one closes the web browser. 
initiate pop-ups to unknown sites to gather valuable consumer information. 
show the status of a Web site to be secure. 

gather personal and confidential information from consumers’ hard drives. 


Which of the following is false regarding a Nigerian money offer scam? 


aoe 


It states the need for urgent assistance. 

It makes the victim feel like he or she is the only recipient of the special opportunity. 
It involves someone trying to sell a piece of prime African real estate. 

The e-mail is the promise of money and asks for help. 


All of the following are types of foreign advance schemes, EXCEPT: 


aoe 


Disbursement of money from wills. 
Multi-level marketing scams. 

Sale of crude oil below market price. 
Purchase of real estate scam. 


What is dumpster diving? 


a. 


b. 


An activity where fraudsters use an information storage device to gain access to valuable 
information. 

An activity where a perpetrator will try to build a relationship of confidence with the 
victim. 

An activity where criminals watch consumers from a nearby location as they give credit 
card or other valuable information. 

An activity where fraudsters rummage through consumers’ garbage bins. 
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SECTION B 
(Each question is worth 20 marks, for a total of 60 marks) 


Candidates MUST answer any THREE (3) of the FIVE (5) questions in the Answer Book provided. 


Question 1 (20 Marks) 


Consider the three aspects of the fraud motivation triangle. If you were hired by the board of directors 
to tell them what they could do to prevent fraud, what general activities would you tell them to engage 
in? List four or more activities for each of the three dimensions of the fraud triangle listed here: 


1. Attitude/Rationalisation; 


2D Motivation/Pressure; and 


3. Opportunity. 


Question 2 (20 Marks) 


Your boss knows you are taking a fraud examination course at university. He is interested in learning 
more about data driven fraud detection and asks you to prepare a short memo briefly explaining data- 
driven fraud detection methods and techniques. List three data analysis methods and briefly explain 
them. 


Question 3 (20 Marks) 


Tom works for XYZ Corp and is suspected of embezzling from the company. By searching databases 
on the internet, talking with his ex-wife and searching through his garbage bins you gather the 
following information: 


Assets $120,000 
Liabilities 70,000 
Living expenses per annum 50,000 
Known income per annum 60,000 
Prior year’s net worth 10,000 


a) Use these data to figure out Tom’s income from unknown sources by performing a net 
worth calculation (10 Marks); and 


b) How can this information be used to motivate Tom to confess that he has stolen money 
from XYZ Corp? (10 Marks) 


AFM340, Trimester 1 2015 


Question 4 (20 Marks) 


Thomas is the CEO of a business that just went public. He is feeling intense pressure for the business 
to succeed because all of his relatives have invested heavily in his company. Since going public, sales 
have been flat, and Thomas is worried about not meeting analysts’ and even relatives’ expectations. 
Which financial statement accounts might Thomas attempt to manipulate in order to meet analysts’ 
projected earnings? 


Question 5 (20 Marks) 


Jill has begun working at a local florist. In addition to creating floral arrangements, Jill spends a good 
deal of her time talking to customers and ringing up sales. Over time, she identifies a weakness in the 
procedures for ringing up a cancelled sale. No approval is necessary to cancel a sale, and the 
cancellation slip contains little information about the sale. After Jill has completed a sale and the 
customer has left she cancels the sale and pockets the cash that was just received. The florist shop 
doesn’t miss the lost inventory because it has a high inventory turnover ratio and high losses due to 
flowers losing their bloom. 


a) What type of fraud is Jill committing? (10 Marks); and 
b) What could the owner of the business do to prevent this type of fraud occurring? (10 Marks). 
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NAME: 


STUDENT NUMBER: 


PART A - Multiple Choice Answer Sheet 
(Circle the letter of your choice) 


1 a b Cc d 21 a b c d 
2 a b Cc d 22 a b c d 
3 a b Cc d 23 a b Cc d 
4 a b Cc d 24 a b c d 
5 a b Cc d 25 a b Cc d 
6 a b Cc d 26 a b Cc d 
7 a b c d 27 a b c d 
8 a b Cc d 28 a b Cc d 
9 a b Cc d 29 a b Cc d 
10 a b Cc d 30 a b Cc d 
11 a b Cc d 31 a b Cc d 
12 a b Cc d a2 a b Cc d 
13 a b Cc d 33 a b Cc d 
14 a b Cc d 34 a b Cc d 
15 a b Cc d 35 a b Cc d 
16 a b Cc d 36 a b Cc d 
17 a b Cc d 37 a b Cc d 
18 a b Cc d 38 a b Cc d 
19 a b Cc d 39 a b Cc d 
20 a b Cc d 40 a b Cc d 


Please remember - This examination question paper MUST BE HANDED IN. Failure to do so may 
result in the cancellation of all marks for this examination. Writing your name and number on the 
front will help us confirm that your paper has been returned. 
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